OpenBSD / src / my9rpmq / Rework ssl_ctx_use_certificate_chain_bio() to use the CERT_PKEY chain.

OpenBSD/src my9rpmq — lib/libssl ssl_rsa.c

2019-03-25 16:46:48 UTC by jsing on ⎇

HEAD

🏷

OPENBSD_6_8_BASE
OPENBSD_6_7_BASE
OPENBSD_6_6_BASE
OPENBSD_6_5_BASE

   Rework ssl_ctx_use_certificate_chain_bio() to use the CERT_PKEY chain.

   This means that any additional CA certificates end up on the per
   certificate chain, rather than the single/shared extra_certs.

   Also simplify this code and in particular, avoid setting the return value
   to indicate success until we've actually succeeded.

   ok beck@ tb@

Version	Delta		File
1.31	+26	-46	lib/libssl/ssl_rsa.c
	+26	-46	1 files

Unified Split Raw